rpbs-self-attestation

This package is based on blind-signer and adjusted to make self-attestation on provided data.

Here we introduce SelfAttester who acts both as a Recipient and a Signer. From the initial scheme perspective the only significant difference is how we treat parameters in Round 3, now they are formed in deterministic manner.

In particular:

alpha = sha256(y2, m, x, 1)
beta  = sha256(y2, m, x, 2)
u1    = sha256(y2, m, x, 3)
v1    = sha256(y2, m, x, 4)
u2    = sha256(y2, m, x, 5)
v2    = sha256(y2, m, x, 6)

where y2 - commonInfo hash m - blinded message point x - signer's private key